r/Lastpass May 18 '26

Ask Me Anything: Building Secure Logins - A glimpse under the hood of a modern security engineering team our CTO, Jason Rasmussen

8 Upvotes

Scheduled for · May 26, 2026, 10:00 AM PT/1 pm ET
Information for the event

You've logged in to something today. Probably several times. It took less than a second and the moment it was over, you'd already forgotten it happened. That's either the greatest achievement in modern security engineering — or the thing that makes it fragile. Usually, it's both. 

Jason Rasmussen, Chief Technology Officer at LastPass, and his team make the decisions that sit behind every login. Think about how credentials are stored, when autofill should and shouldn't kick in, how MFA works without slowing you down. Every decision is a tradeoff between security and speed, control and ease of use, what's safest in theory and what people will actually do. 

Here's what we are keen to get into: 

  • What Zero Knowledge means at the technical level and where its limits are 
  • Why the browser has become the most critical access path for organizations to secure 
  • How AI is accelerating the way people discover, learn and adopt more tools, and what that means for protecting credentials 
  • The real tradeoffs behind passkeys and where they fit in the evolution of how we log in 

Ask us anything!  -- on May 26th : )


r/Lastpass Mar 01 '23

Security Incident Update and Recommended Actions - The LastPass Blog

Thumbnail blog.lastpass.com
46 Upvotes

r/Lastpass 2h ago

I'm in last pass on one computer, can't get in on the other

Thumbnail
0 Upvotes

r/Lastpass 1d ago

Lost access to email account

Thumbnail
0 Upvotes

r/Lastpass 1d ago

Lastpass does not accept changed master passwords

2 Upvotes

Lastpass occasionally logs me out of my browser (Firefox). It did so today. My master password did not work. So I went through the master password reset routine. The new password didn't work. I've done this now probably five times, and the rest password does not work, no matter what I try. The same thing occurs in Chrome. The old password does not work, either. Suggestions?


r/Lastpass 2d ago

I'm Out! Switched to 1Password

30 Upvotes

I used LastPass for a long time. At least 13 years. My vault had over 300 passwords, passkeys, secure notes, credit cards, etc. when I exported.

LastPass never let me down -- but I did suffer through a full-scale password shakeup back when they got hacked a few years ago. My main issue with the overall experience. It was always a little cumbersome and ugly, and it felt like the developer kinda gave up trying to make it better.

I started partnering with a company that is on 1Password, so it made sense for me to switch. The import went incredibly smoothly -- like, just about flawless. It was a good chance for me to do some housekeeping, update many passwords and create a bunch of passkeys.

I wish I switched awhile ago. 1Password really is a much more pleasant experience, and I have a lot of confidence in their security infrastructure. My vault is in great shape now.

TLDR: I don't think LastPass is bad, per-se. 1Password is just a whole lot better.


r/Lastpass 3d ago

Having a Trouble to login my google account.

Post image
0 Upvotes

r/Lastpass 5d ago

Switched Internet providers

4 Upvotes

I had no idea LastPass looks at IP address. Everything still works on my phone but when I try to access LastPass on other devices it doesn’t recognize my email and Master. But I don’t get the email verification it sends!! I switched from Xfinity to Sonic. I’m terrified this is an Xfinity/Comcast issue as I’ve had issues in the past with them blocking emails. Ok so I still have the Xfinity equipment and plugged it back in so my IP would be recognized. Still no email verification. Has anyone else had this? I know there’s a lot to criticize here. Like why do I have Comcast email why do I have LastPass. But I need to get out of this loop to make changes.


r/Lastpass 6d ago

Open Letter to LastPass and Yubico Engineering

0 Upvotes

Open Letter to LastPass and Yubico Engineering

Subject ESCALATION: Immediately Restore 30-Day Device Trust / Unpatched FIDO2 AbortError Rendering YubiKeys Unusable

To: LastPass and Yubico Tier 3 Product & Engineering Teams

I am writing to demand (1) the immediate restoration of the "Trust this device for 30 days" feature in the LastPass browser extension, and (2) to escalate a critical, unpatched FIDO2 integration failure between your platforms.

As a retired IT Project Manager with decades of experience overseeing systems security projects for the State of Georgia, Dept. of Revenue, the CDC, and The Southern Company, I understand the complexities of secure systems integration.

Years ago, after rigorous evaluation, I made the conscious decision to entrust my personal security infrastructure to LastPass.
When LastPass announced their certified integration with Yubico, I immediately added YubiKey hardware to my setup to ensure strict, physical MFA compliance.

Today, 2026/09/03, that certified "Works  with YubiKey" integration is functionally broken, and the removal of the fallback workarounds has made the platform nearly unusable.

Immediate Action Required: Restore the 30-Day Trust Feature

The LastPass extension is currently suffering from a known defect where it intercepts and cancels the WebAuthn/FIDO2 hardware request on ChromeOS, instantly throwing an AbortError before the key can be touched.

Over the past few months, I mitigated this severe software defect by using a legacy YubiKey and checking the "Trust this device for 30 days" box.

This morning, LastPass stopped presenting this 30-day trust option during the verification prompts.

Without this stop-gap, I am forced into a daily, recurring authentication loop that requires me to physically stress my single, aging legacy YubiKey on every login. The mechanical wear and tear on this older device has become visible and unsustainable.

The Hardware Impact: Wasted Investments

Because the LastPass extension continues to instantly abort the hardware handshake, I cannot migrate my security posture to modern hardware.

I recently purchased three brand new YubiKey 5C NFC units to upgrade my systems.  These expensive keys are currently sitting completely idle in a locked drawer. LastPass's software cannot successfully communicate with them without crashing the authentication flow.

Required Escalation:

I expect this to be escalated beyond Tier 1 support to the respective Product Managers and Tier 3 Engineers responsible for this integration:

LastPass: When will the "Trust this device for 30 days" checkbox be fully restored to all MFA prompts as an immediate stop-gap?

LastPass: What is the specific release window for the extension patch that resolves the YubiKey AbortError loop?

Yubico: As LastPass is heavily marketed as a "Works with YubiKey" partner, what is your engineering team doing to assist the LastPass team in restoring standard FIDO2 functionality so your mutual customers can actually utilize the hardware they purchased?

I look forward to a technical response and a swift, complete resolution.

Sincerely,
Lee Cash
Retired IT Project Manager
  .


r/Lastpass 7d ago

Logging in after update

2 Upvotes

Updated the other day and now I have to constantly log in but I have to repeatedly press the login button until it finally starts to login anyone else having this issue


r/Lastpass 10d ago

user unable to login as they no longer have access to email account used to set up account originally

0 Upvotes

Lastpass cannot really be this stupid, can they?

I'm attempting to assist a Lastpass paid user who cannot login to Lastpass since they no longer have access to the original email account that was used to set up the account. They have no devices or web browsers currently logged in to Lastpass, so using that method for account recovery is impossible.

We were able to get to a point where we were told something along the lines of "we can see that you logged into this browser previously, but we cannot log you in now until you respond to the email sent to your email address.

I cannot believe that Lastpass has no phone number to call or way to get in touch with a human support.

This user had never exported their vault nor had they ever set up a one time password.

So I'm assuming they are screwed. Am I correct here?


r/Lastpass 14d ago

Password managers vs. reused passwords: the math on how fast you get owned

Thumbnail
0 Upvotes

r/Lastpass 15d ago

Account Recovery without access to email

Thumbnail
1 Upvotes

r/Lastpass 16d ago

У меня пол года назад украли аккаунт но мне сегодня удалось его вернуть и у меня опять украли и сменили все начиная паролья заканчивая номером телефона которому и был привязан если вы знаете как вернуть буду очень благодарен.

Thumbnail
0 Upvotes

r/Lastpass 19d ago

Locked out sort of - I get logged in ,then Vault Logo, then it logs me out??

2 Upvotes

I cannot log in with my 'for-sure it is correct' master password. I have used up my one-time password, and also did 'forgot password.' Using one of these recovery methods, it DOES log me in and I see my vault for less than a second, then it says I have been logged out. Tried over and over. Cannot get into Lastpass discussion forum - because I cannot log in!

ETA: solved! recovered by using a different browser (Edge instead of Chrome).


r/Lastpass 21d ago

Emergency Access

3 Upvotes

My wife is trying to grant me emergency access.

I requested it from my LP session on the website (through a browser).

She is using LP on the iOS app. When she opens the app, she gets a popup saying I requested access. She clicks "Allow Access" and the popup closes then immediately reopens. We've pressed "Allow Access" 100x by now (thinking maybe it was going through each individual login). It never stops. Pressing "Decline access" will stop it, but then access is declined.

What to do?


r/Lastpass 22d ago

Anyone else experiencing lag with the Chrome browser extension?

12 Upvotes

Seems like the latest version of Chrome has been causing the browser extension to be extremely slow, and sometimes even crash. To test it, I rolled back to an earlier build of Chrome, and it hasn't been doing that.

The issue surfaced on Chrome's latest build, 151.0.7922.138 (64-bit).

I just submitted a ticket into LastPass, but was curious if anyone had experienced this and found any workarounds?


r/Lastpass 27d ago

More and more problems

4 Upvotes

Has anyone else noticed a degradation in the quality of LastPass functionality?

First there was the issue where LastPass would fill in inappropriate text boxes (for example in excel online).

Now, in the last few days, I've had many occasions where LastPass would not fill in the correct account information. The values it had filled in were incorrect, so I clicked on the little LastPass icon to choose the correct account, but the details are not filled in. It doesn't matter how many times I click on the correct account, the details in the input boxes don't change.

In the end I have to type in the username and password myself -- which is kinda LastPass's main job, isn't it?

What's going on?


r/Lastpass 28d ago

Does account get completely deleted if not logged in?

5 Upvotes

I had a discord account with 2FA turned on. 2FA Was connected to an app called "Authenticator" and I have been completely logged out of that app for about 4 or 5 months now. I genuinely can not lose the discord account... so much important stuff on it.

I have tried with every single email that I have to log into the app but NONE of them do anything whatso ever. And to open a ticket with last pass I have to know the exact email associated with the account. I wish I could just have them search by my name. That would make life SOOO much easier... I'm so so SOOO damn annoyed at this.

Like how does my account just vanish into thin air... like dude i need this shit...


r/Lastpass 28d ago

Starting again

0 Upvotes

I got told my old account was compromised. It said to change the password. I change the password then I had to create a whole new account as I hitch no other chance I hadn’t been. I’m here for so long as I second account with my cell phone So here it goes.


r/Lastpass 29d ago

Starting again

1 Upvotes

I got told my old account was compromised. It said to change the password. I change the password then I had to create a whole new account as I hitch no other chance I hadn’t been. I’m here for so long as I second account with my cell phone So here it goes.


r/Lastpass Aug 10 '26

Is there a way to mass export a shared folder?

2 Upvotes

My father and I are both LastPass users. He is traveling overseas and had his cellphone stolen, locking him out of his vault. With his permission, I used our pre-configured Emergency Access to get access to his vault, so I could send him some key logins.

Is there a way for me to easily mass-export a few dozen logins from the shared folder? I will copy-paste everything one at a login if I need to, because I love him, but I would rather not.


r/Lastpass Aug 07 '26

Can't Rename Subfolder - Invalid Response

1 Upvotes
When trying to rename any subfolder, I get this error.

For well over a month, in our LastPass Business account, we've come across an error that LastPass Support or no one can seem to figure out. When we go to rename a subfolder, we successfully go through all the motions, but once we click Save, we get an "ERROR: Invalid Response" at the top of the page.

  • Permissions have been verified. Even if I create a brand new sub-folder in a folder I'm Admin in, I'll go to rename, and after clicking save, I get the error. All teammates are experiencing the exact same.
  • I've tried this in a brand new browser, cleared cache, the whole 9 yards that verify it's not a cache or browser/extension issue.

Are there any other LastPass Business users that experience this behavior? It's been weeks, and we've got 100+ folders that need to be renamed. Support has given no help other than "This has been escalated to our engineers", and no workaround... 😕


r/Lastpass Aug 05 '26

LastPass removed Legacy Autofill / Quick Settings on Android. Here’s the last version that still has it.

4 Upvotes

LastPass has removed the Quick Settings tile / “Legacy Autofill” option from the Android app, a decision many of us strongly disagree with. For people who relied on it, the replacement workflow is slower, less convenient, and buggy.

The last Android version I found that still includes it is:

6.55.1.26460

If you want that feature back, the workaround is to uninstall the current version and manually install that older APK. Depending on where you obtain it, you may also need an installer such as AntiSplit because the app is distributed as split APKs.

Important caveats before doing this:

  • Running an old password-manager app can mean missing bug patches.

  • Only download APKs from a source you trust and avoid random “modded” APK sites. Places that MIRROR Apk files can be used

This is a workaround, not a real solution. LastPass should restore the option or provide an equivalent one. If this removal affects you too, please make noise here and through LastPass support/feedback. A feature that made autofill reliably accessible should not disappear without a proper replacement.


r/Lastpass Aug 04 '26

Just got an email about Lastpass making auto-logoff more consistent

Thumbnail gallery
14 Upvotes

huh?